Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
File:                     dee88f5f-56a7-311a-b481-95eb3fb841c0.roa (raw, json)
Hash identifier:          IMT4g/+1Gf5pLW1VMHLIgHoYWBNTWq/dBcw+6smC+vY=
Subject key identifier:   58:15:9C:11:0E:FA:D0:5D:E9:33:2C:43:51:2B:4B:AA:B4:D8:C8:34
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D4B21540ABB373D19F8B0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2607:fe88:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4b:21:54:0a:bb:37:3d:19:f8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=01141b38-6556-4f4f-91e3-4810f3886580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:7e:a1:20:d5:82:e0:21:a5:59:b7:13:25:
                    5f:c7:16:27:89:b9:0c:6d:5b:79:7b:4a:d2:c0:f2:
                    66:00:87:51:e5:b7:a3:e9:89:2e:b9:c4:3e:c2:00:
                    c7:8c:31:a7:47:17:18:f0:7c:99:49:5b:62:ba:8e:
                    98:18:46:3b:79:96:18:2d:15:2a:4a:ee:b3:4b:e0:
                    66:40:6f:cd:18:87:d0:a8:1c:c9:a9:b0:8e:07:17:
                    95:0e:2b:02:25:01:7b:e9:e4:a4:d2:cc:9e:e3:ac:
                    1f:14:b5:38:3f:8e:a1:f6:22:36:f1:e6:a4:8c:f4:
                    b5:c7:6b:09:33:61:b6:c0:9d:b4:5c:c0:aa:48:77:
                    50:0a:a5:b1:79:35:48:37:f8:9f:db:e3:2d:04:e3:
                    77:7e:ee:e5:23:31:49:c1:78:eb:55:e6:de:21:68:
                    be:a6:6b:12:38:a0:c8:bc:bc:eb:3c:f7:dc:30:91:
                    f7:1b:53:86:e9:99:ee:de:f4:c0:96:00:2c:1b:b5:
                    f6:15:aa:4c:4a:85:fd:1a:9c:68:c1:1f:d7:12:58:
                    10:80:88:34:f6:74:66:e3:48:a1:78:57:d5:78:1a:
                    d1:ff:1f:e3:44:50:7d:d3:e6:e1:aa:63:5b:69:8c:
                    90:01:92:8d:93:87:81:44:89:bd:5b:21:da:d6:a4:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:9C:11:0E:FA:D0:5D:E9:33:2C:43:51:2B:4B:AA:B4:D8:C8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:7a:26:ce:54:b0:50:51:b9:f8:45:6f:ad:65:57:1e:46:
         18:2c:11:c3:81:34:46:97:fe:a8:1e:94:63:04:79:2c:69:ea:
         56:88:23:7e:4b:4e:29:54:3f:cb:a6:60:2c:0f:39:cb:31:75:
         e3:69:06:7c:2d:aa:3c:c4:54:ed:c6:b1:66:5f:f9:e7:d4:6f:
         ec:3b:4b:c1:60:b9:d1:a8:a8:4d:94:9b:68:0e:93:73:a1:00:
         a3:16:48:1b:75:64:f4:f6:15:a0:98:8b:ce:3c:31:d9:d0:69:
         d5:b6:a3:3b:9f:99:34:df:6c:81:d4:03:dd:74:79:3a:dd:81:
         1a:d6:36:51:bf:92:bf:70:8c:37:1f:ba:71:09:2a:2b:91:0a:
         7d:bb:68:a5:1a:91:f9:c4:f8:46:e8:cd:8c:73:1b:44:68:8c:
         b5:ba:4d:c2:01:29:7c:ff:35:66:f8:24:2e:e5:86:52:4f:ce:
         7f:76:12:35:42:e3:a2:40:88:0a:3e:c7:59:93:bf:1a:b2:f0:
         c9:ac:10:86:30:b0:ca:ea:1b:41:8f:6f:c3:f3:89:8c:1c:e7:
         07:3c:dd:86:bd:24:55:dd:eb:ff:07:a8:3d:be:7f:e4:81:79:
         97:fc:7e:e4:18:74:92:79:a0:0c:08:58:e7:d7:9e:fa:58:b5:
         cb:33:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:29 2024 by rpki-client on console-fra.rpki-client.org